This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: ODWAWpS+eM5KNVIvvOYQMHXdaARN5ilDhoe0yP/HI/E=
Subject key identifier: CD:75:F5:B2:00:8A:F4:EF:D7:9F:05:7F:90:5F:3A:3E:FE:A5:C0:EA
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019C424682E8C35211773F6239B7C6E83FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0541
Signing time: Mon 09 Feb 2026 12:00:43 +0000
Manifest this update: Mon 09 Feb 2026 12:00:43 +0000
Manifest next update: Tue 10 Feb 2026 12:00:43 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: zb2omxiYG2LqtVqNT++GdgHyDSpUPySVdFmyREdAn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:82:e8:c3:52:11:77:3f:62:39:b7:c6:e8:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Feb 9 12:00:43 2026 GMT
Not After : Feb 10 12:00:43 2026 GMT
Subject: CN=cd75f5b2008af4efd79f057f905f3a3efea5c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:73:59:12:2a:11:ac:52:10:fd:db:f0:4b:
22:aa:bb:ce:89:b1:0b:04:11:c0:d3:52:89:fb:cf:
3e:63:e2:a5:63:a9:41:8a:38:16:68:e2:9f:54:d8:
41:a2:c6:25:54:c2:0c:59:65:ca:c9:83:98:19:7f:
de:99:45:79:06:e6:51:bb:80:84:b6:ef:51:f1:5b:
c5:d7:d8:11:b4:70:77:7c:77:50:52:fb:eb:94:d6:
11:60:45:04:51:29:5b:10:25:7e:fa:e3:88:1a:f5:
67:98:34:87:85:4e:c0:a5:b4:c1:fd:09:bb:97:39:
7b:f3:54:11:eb:21:d2:95:63:0a:e7:a9:22:35:f8:
38:ab:c3:47:97:69:20:2a:f9:b3:d2:ff:ab:c7:78:
e5:f8:d4:19:e9:a0:02:6e:8b:f2:71:92:a4:2f:81:
7f:9a:ac:d1:3d:b2:e7:74:ec:fb:31:8f:24:8d:fe:
fe:7b:f9:45:97:58:d0:70:dc:ff:bf:9a:5b:d4:2c:
e4:74:7e:61:17:0d:24:f2:82:5b:1d:71:f3:88:92:
fd:1f:b7:f6:f5:c9:93:75:6d:3c:78:10:7c:9d:cc:
77:91:ad:bc:93:61:c0:f4:6c:ec:7f:ed:4f:dc:1b:
ad:62:71:47:d1:42:ae:a0:54:7c:05:42:07:00:47:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:F5:B2:00:8A:F4:EF:D7:9F:05:7F:90:5F:3A:3E:FE:A5:C0:EA
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:52:e2:4f:af:c8:95:58:95:5d:ca:ff:6d:b5:28:36:a8:
fc:3d:73:da:f3:89:c6:a5:b4:cb:f9:b8:a9:03:11:96:13:cd:
e8:62:5c:13:d2:b1:0e:e3:73:23:2b:15:b7:75:b8:3f:f0:c2:
3b:00:50:be:e4:9b:7e:ba:4a:6c:77:4c:37:63:f5:46:bd:43:
77:30:57:1e:89:17:2e:ce:47:cb:50:e6:4b:be:a1:62:99:c5:
0e:3c:eb:6c:d7:c2:fa:41:94:3c:c3:ce:2e:53:00:8b:c1:36:
72:d4:b4:c1:64:cb:d6:07:1a:4c:bf:f8:f0:d7:b4:79:c2:08:
1e:00:a4:7e:ab:4b:eb:82:89:7c:05:f7:31:6d:71:e2:37:a7:
7a:0c:d4:67:45:71:fa:19:7b:cc:d6:e0:8e:ef:64:e4:64:46:
a8:68:6a:9f:70:da:35:e8:46:ce:7c:b2:05:a9:3e:f5:8c:e5:
51:e0:ef:41:e2:11:f0:8d:b2:5d:89:95:79:80:ac:87:79:50:
ce:ad:ff:38:a7:c2:c9:8f:0e:d9:11:cc:4a:21:a3:25:28:eb:
4e:2e:97:7e:92:50:c9:ee:4e:8a:50:3f:8d:b3:57:23:ad:12:
57:d4:5f:d8:da:b2:d9:20:c9:9d:9e:39:af:1f:91:d2:dc:ea:
4c:6b:e9:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRoLow1IRdz9iObfG6D+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjhhY2M5ZDZlYTgzNDIxNDEzZTRjZjVhMDczN2ZhYzMx
NzM1MmEwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD
EyhjZDc1ZjViMjAwOGFmNGVmZDc5ZjA1N2Y5MDVmM2EzZWZlYTVjMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPlzWRIqEaxSEP3b8EsiqrvOibEL
BBHA01KJ+88+Y+KlY6lBijgWaOKfVNhBosYlVMIMWWXKyYOYGX/emUV5BuZRu4CE
tu9R8VvF19gRtHB3fHdQUvvrlNYRYEUEUSlbECV++uOIGvVnmDSHhU7ApbTB/Qm7
lzl781QR6yHSlWMK56kiNfg4q8NHl2kgKvmz0v+rx3jl+NQZ6aACbovycZKkL4F/
mqzRPbLndOz7MY8kjf7+e/lFl1jQcNz/v5pb1CzkdH5hFw0k8oJbHXHziJL9H7f2
9cmTdW08eBB8ncx3ka28k2HA9Gzsf+1P3ButYnFH0UKuoFR8BUIHAEe0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM119bIAivTv158Ff5BfOj7+pcDqMB8GA1UdIwQY
MBaAFA1orMnW6oNCFBPkz1oHN/rDFzUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQt
NGU0YTUwNjU1OTRhLzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQtNGU0YTUwNjU1OTRh
LzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiRS4k+v
yJVYlV3K/221KDao/D1z2vOJxqW0y/m4qQMRlhPN6GJcE9KxDuNzIysVt3W4P/DC
OwBQvuSbfrpKbHdMN2P1Rr1DdzBXHokXLs5Hy1DmS76hYpnFDjzrbNfC+kGUPMPO
LlMAi8E2ctS0wWTL1gcaTL/48Ne0ecIIHgCkfqtL64KJfAX3MW1x4jenegzUZ0Vx
+hl7zNbgju9k5GRGqGhqn3DaNehGznyyBak+9YzlUeDvQeIR8I2yXYmVeYCsh3lQ
zq3/OKfCyY8O2RHMSiGjJSjrTi6XfpJQye5OilA/jbNXI60SV9Rf2Nqy2SDJnZ45
rx+R0tzqTGvpXw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:35 2026 by rpki-client